Imperva Cyber Community

Expand all | Collapse all

Blocking on RDS Instances

  • 1.  Blocking on RDS Instances

    Posted 26 days ago
    Greetings,

    Understand that RDS Instances or DB PaaS, such as on AWS or Azure platforms, does not support blocking action.

    If the customer has a requirement for blocking or preventing unusual activities, how can DAM be useful in this case?
    #DatabaseActivityMonitoring

    ------------------------------
    Ho Larry
    Senior Presales Consultant
    M.Tech Products
    Singapore
    ------------------------------


  • 2.  RE: Blocking on RDS Instances

    Community Manager
    Posted 19 days ago

    Hi there,

    Thanks for posting.

    Did you get the information you required? I have found a couple of threads that may provide some more information, but please let me know if you need further help with this.

    Getting Started with Cloud Data Security for Amazon RDS (imperva.com)
    AWS Images | Imperva Cyber Community

    Thanks,



    ------------------------------
    Sarah Lamont
    Digital Community Manager
    ------------------------------



  • 3.  RE: Blocking on RDS Instances

    Posted 17 days ago
    Depending on your use case, we support an immediate response using Sonar workflows.  If bad traffic is seen, you can trigger a workflow that will disable the user or take some other action (like block on the firewall).  

    I say it depends on your use case because it will not stop a "drop table" event, but works really well with data exfiltration.

    Jim

    ------------------------------
    Jim Burtoft
    SE
    State College PA
    ------------------------------